Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Leopard printing observations



Dan Stranathan wrote:
I have a test Leopard print server up and running. Im trying to share out a USB Epson printer via IPP/mDNS and also Im trying to “push” out the printer via Open Directory to a groups of test computers on my LAN (also running Leopard). I have some observations:

1. I have noticed that Leopards print dialog box doesn’t show Bonjour printers dynamically in the “Print” box. You can see your current printers and of course you can add a printer (assuming you are an administrator), but you no longer can see/add Bonjour printers from the Print dialog box.

Yeah, that's moved to the printer browser, which you bring up by selecting "Add Printer...". When you select a CUPS or Bonjour shared printer, the client uses the driver (PPD file) from the server.

2. I have noticed that on some of my Leopard test clients that once I have manually added the printer queue from my Leopard print server (via IPP/Bonjour) to my test client, the Print and Fax Sys Pref Pane doesn’t think I have added the printer yet, but the CUPS admin page thinks that I have (and the “Print Test Page” from CUPS works too), and the actual Print dialog box in TExtEdit.app for example also see the print queue too, but when I go back to the Print & Fax Sys Pref Pane, the new print queue isn't there. If I look in ~/Library/Printers/, I see the <print queue>.app as expected. Obviously there is a bug in the Print & Fax System Pref Pane?

No, CUPS shared printers are hidden unless you add them explicitly. This is managed on a per-user basis...

(The PMPrinterIsFavorite and PMPrinterSetAsFavorite functions
 manage the per-user favorites list, which controls what appears in
 the print dialog.)

3. I have the Leopard test print server running on the same server as my test OD master server. The only 2 services I have on are print and OD. When I try and create a computer group in OD and add the print queue to the computer group, OD acts like it doesn’t see the queue, even though the USB printer is physically attached to the same computer. Any reason why OD wont let me publish the print queue on the same system that the print server is on?

Have you turned printer sharing on, and is the printer shared?

If so, this is probably a bug - please report it!

4. Can someone explain why uses must be administrators to add printers in Leopard?

This change was for improving security - CUPS runs third-party software (drivers) that is listed in the printer's PPD file, so we don't want to allow ordinary users to add printers. This isn't an issue for the typical home install (first/only user is admin), but for more security conscious installs the printing system automatically adjusts, requiring admin authentication if you aren't already admin or if you have checked the "Require password to unlock each System Preference pane" box in the Security preferences.

(The primary concern is just that unauthorized users could gain
 access to jobs printed by others through a program listed as a
 CUPS filter, and those jobs may contain sensitive information...)

Are there any ways to bypass this, or at least let users add
printers but not have full local admin rights to the computer?

CUPS 1.3.x (which is what comes with Leopard) includes much greater control over the policies/access controls provided by the print system. See:

    http://localhost:631/help/policies.html

for information on how you can customize the default policy to
grant greater access to non-admin users.

You can edit the cupsd.conf file from the web interface as well:

    http://localhost:631/admin

--
______________________________________________________________________
Michael R Sweet                        Senior Printing System Engineer
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Printing mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/printing/email@hidden

This email sent to email@hidden
References: 
 >Leopard printing observations (From: Dan Stranathan <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.